For Security engineer · 9 Grok Bots

A security bench that triages your findings, threat-models your designs, and keeps your posture honest

9 Grok Bots for a hands-on security engineer: dedupe the finding queue, threat-model each design, review each pull request, draft detection rules, draft remediation tickets, and build the posture report — all as drafts you approve.

Hire the team See the bots
● Drafts only — nothing sends without your approval · Uses only your own data
After checkout
Your setup link arrives by email
We set up your fleet
After checkout, Workplace AI provisions your fleet on our Cursor Teams workspace and follows up soon. Watch for your Cursor invite and Grok Bot download link — then accept, install, and go.
9 bots·3 domain specialists·Success metric: Real-finding coverage and time-to-triage·Category: Tech & digital
The problem it targets

Holding the whole security surface in one head — reading scanner, bug-bounty, and pentest output and deduping it into a real queue, threat-modeling features from a design doc, reading pull requests for the vulnerability that matters, hand-writing detection rules after every incident, chasing owners to fix findings, and rebuilding the posture picture before every review — so a real finding sits under noise, a design ships un-modeled, and the on-call log is gone by the retro.

What you get

From day one

1

Every scanner, bug-bounty, and pentest finding you bring in deduped into one queue with a proposed severity and the evidence line, so a real finding never sits buried under noise.

2

A threat model drafted for each design and a security-review note for each pull request — the exact lines, boundaries, and STRIDE-style threats at risk — plus a detection rule drafted with a test that proves it fires only on the real pattern.

3

A remediation ticket drafted for each finding with the exception and risk-acceptance dates tracked, and a one-page weekly posture report with every number traceable to its finding rows.

Meet the team

9 bots, each with one job and clear approval points

Read-only bots watch and prepare; drafting bots write but never send. You approve everything that leaves.

1

Chief of Staff

coach
Drafts for your review — you approve before anything leaves
Your morning brief, meeting prep, fleet roundup, and after-meeting coaching.
Approves: none — nothing leaves without you
2

Finding Triage Organizer

intake
read-only
Watches & prepares — never sends
Deduping scanner, bug-bounty, and pentest output into one queue with a proposed severity and evidence line
Approves: severity proposals for the engineer to confirm
3

Threat Model Drafter

drafter
specialist
Drafts for your review — you approve before anything leaves
Threat models from a design doc — data-flow, trust boundaries, STRIDE threats, suggested mitigations
Approves: every model before it drives a design decision
4

Secure Review Analyst

researcher
read-only
Watches & prepares — never sends
Security-review notes on a pull request or design, every issue cited to its diff line
Approves: none (nothing changes; notes are internal)
5

Detection Rule Drafter

drafter
specialist
Drafts for your review — you approve before anything leaves
Drafted detection rules with a fires and a does-not-fire test case
Approves: every rule before it is deployed
6

Remediation Coordinator

coordinator
Drafts for your review — you approve before anything leaves
Drafted remediation tickets and owner notes; tracked exceptions and risk-acceptance dates
Approves: every ticket and message before it is sent; any risk acceptance
7

Security Posture Reporter

reporter
read-only
Watches & prepares — never sends
Weekly posture report — open findings by severity and SLA — every number traced to its rows
Approves: none (nothing leaves; the engineer acts)
8

On-Call & Evidence Tracker

tracker
read-only
Watches & prepares — never sends
The engineer's own on-call and incident log and the evidence a review or audit will ask for
Approves: none (internal log; the engineer decides what is shared)
9

Social & Referrals

growth
Drafts for your review — you approve before anything leaves
Draft posts and outreach to your own audience, credited and approved by you.
Approves: sends
The handoff — one shared chat
Organizer→Drafter→Analyst→Drafter→Coordinator→Reporter→Tracker
What the fleet does in week one

All read-and-prepare — you check its work before anything is trusted

What it does not do

The guardrails are the product

  • ×It drafts; it does not send or deploy. Every ticket, message, detection rule, and model waits for your approval.
  • ×It never runs a scan, exploit, or probe against any system — it works only from findings and code you have already gathered.
  • ×It never merges a fix, changes a production or live security control, accepts a risk, or finalizes a severity — those calls are yours.
  • ×It works only your own opted-in contacts and never posts client-confidential or unpatched detail.
Real-finding
coverage and time-to-triage
How you'll know it's working

One number, measured over time

Share of open findings that are deduped, severity-ranked, and carry a next step or an owned exception, and how quickly a new finding or reviewed change gets a drafted assessment ready for the engineer to decide

Before day one

What you fill in — the bots never guess these

findings-log
the header contract for the findings queue every bot reads and writes.
threat-model
the layout of a threat model you can scan and adjust.
exception-register
your own risk-acceptance and exception record, with review dates.
Pricing

Cancel anytime.

Workplace AI provisions and runs your CrokPot fleet on our Cursor Teams workspace. We invite you on your own email — you accept, install Grok Bot, and we handle the rest.
$200/mo
  • Your whole fleet provisioned and installed for you
  • Cursor Teams seat included — paid by Workplace AI, never billed by Cursor
  • Onboarding + ongoing training
Hire the team
Your Cursor Teams seat is included and paid by Workplace AI. Drafts only, using your own data. No earnings, time-saved, or outcome guarantees are made.
How access works

You buy a CrokPot fleet from Workplace AI — not a Cursor plan

CrokPot runs on Workplace AI, Inc.’s (WAI) Cursor Teams workspace. WAI keeps the unpaid admin seat and pays Cursor for your seat. You join as the invited user on your real email and work through the installed Grok Bot fleet.

Your card is charged by WAI via Stripe for the CrokPot fleet ($200/mo, auto-renewing monthly) only — never by Cursor. If you cancel your fleet subscription, the invite/seat ends with it and is not portable to your own Cursor account.

FAQ

What you get, who owns the seat, and what happens after you pay

From the team behind Ancestry — CrokPot is built by Paul Allen, a co-founder of Ancestry.com.

Drafts only — you approve everythingYour own data, never shared$200/mo · cancel anytimeProvisioned & supported by Workplace AI

What do I actually get?

A pre-built fleet of Grok Bots for your trade, provisioned and installed for you on Workplace AI’s Cursor Teams workspace, plus onboarding and ongoing training. Every bot drafts; you approve.

Who owns the seat?

Workplace AI, Inc. (WAI) owns the Cursor Teams account and pays Cursor for your seat. You’re invited as a paid user on your own email. The seat isn’t portable to a personal Cursor account.

Do the bots act on their own?

No. The fleet is drafts-only, working from your own data. Nothing sends, files, or is trusted until you review and approve it — that’s the whole design.

Can I cancel?

Yes, anytime. It’s an auto-renewing monthly subscription at $200/mo. If you cancel, your invite/seat ends with the subscription.

What happens after I pay?

We follow up soon: our team provisions your fleet and invites you on the email you used at checkout. Watch for your Cursor Teams invite and Grok Bot download link, then accept, install, and go.

Training

New to Grok Bots? Get your team trained.

Live sessions and replays to get you and your coworkers productive with your fleet fast.

Explore Grok Bot training